Palo Alto Research Center Inc.

Xerox Corporation

Alejandro Enrique Brito

Shantanu Rane

Ersin Uzun

Julien F Freudiger

Eric Allan Bier

Marshall Bern

Vanishree Rao

Marc E Mosko

Emiliano De Cristofaro

Vincent Bindschaedler

Eric Saund

Francois Ragnet

Hamed Soroush

Paloma Juanita Fautley

Doron Kletter

Asghar Nafarieh

Prateek Sarkar

Massimiliano Albanese

Vanishree Hanumantha Rao

Ibifubara Iganibo

Bashir Sadeghi

Vincent C Bindschadler

Marshall W Bern

Vincent C Bindschaldler

One embodiment provides a system which facilitates reasoning about classifiers. During operation, the system determines a plurality of neural networks. The system derives, from a respective neural network, a linear model, wherein the linear model is constructed based on an output of a penultimate layer of the respective neural network. The system trains the linear model based on activations of the penultimate layer. The system maps parameters of the trained linear model into a version space.

System and method for reasoning about the diversity and robustness of an ensemble of classifiers

One embodiment provides a system which facilitates construction of an ensemble of machine learning models. During operation, the system determines a training set of data objects, wherein each data object is associated with one of a plurality of classes. The system divides the training set of data objects into a number of partitions. The system generates a respective machine learning model for each respective partition using a universal kernel function, which processes the data objects divided into a respective partition to obtain the ensemble of machine learning models. The system trains the machine learning models based on the data objects of the training set. The system predicts an outcome for a testing data object based on the ensemble of machine learning models and an ensemble decision rule.

Method and system for creating an ensemble of machine learning models to defend against adversarial examples

A system determines, in a graph which represents a system of components: vulnerability nodes representing known vulnerabilities to the system, including exposed and non-exposed vulnerability nodes associated with an exploitation likelihood; and dependency nodes representing components in the system, including direct and indirect dependency nodes associated with an exposure factor indicating an amount of degradation based on exploitation of an associated vulnerability. The system calculates, across all non-exposed vulnerability nodes and all direct dependency nodes, a score which indicates an attack volume based on at least: a respective second likelihood associated with a non-exposed vulnerability node; an exposure factor associated with a dependency node which represents a component directly degraded based on exploitation of a vulnerability; and a loss of utility of the component. The score is calculated for one or more configurations of the system, and the system selects an optimal configuration based on the calculated score.

Method and system for facilitating a ranking score using attack volume to find optimal configurations

A building environmental sensor includes a sensing element for collecting measurements of environmental parameters such as temperature, humidity, light, sound or the absence or presence of gas. The sensor will: (a) detect that a data collection device is within a communication range of the sensor; (b) generate a data stream that includes the data that the sensor collected; (c) transmit the data stream to the first data collection device; (d) determine that a communication link between the sensor and the first data collection device was lost before the first data stream was fully transmitted; (e) detect that a second data collection device is within the communication range of the sensor; (f) generate a second data stream that includes the remaining data; and (g) transmit the second data stream to the second data collection device.

Building environmental sensor method and system for collecting data from same

A system for collecting building environmental sensor data includes a first data collection device having a first transceiver that is configured to receive data from proximate building environmental sensors and a second transceiver that is configured to communicate with an external service. The device will, upon detecting that the first transceiver is within a receiving range of a first building environmental sensor, communicatively connect with the first building environmental sensor to receive a data stream that comprises sensor data captured by the first building environmental sensor. The device will continue to receive the data stream until the first transceiver either receives all of the sensor data or moves out of the receiving range. The device will repeat this process for additional building environmental sensors. The device will use its second transceiver to transfer the sensor data to the external service.

Method and system for collecting sensor data in buildings

A certified application is installed onto a content creation device and a mobile certified application is installed onto a mobile device, the applications establish first and second trust relationships with the cloud service. The certified application and mobile certified application establish the third trust relationship via a proximity network. The mobile certified application generates a first ephemeral key pair having a private part. The certified application generates a second ephemeral key pair having a private part. The mobile certified application requests a service from the content creation device involving the transfer of data between the content creation device and the cloud service. The data is protected by at least one of the first and second ephemeral key pairs in response to invocation of the service. The service results in the data being stored at the cloud service and/or rendered at the content creation device.

System and method for securing a content creation device connected to a cloud service

The system determines a version space associated with a set of data comprising a pool of unlabeled samples and a first plurality of labeled samples, wherein the version space includes a first set of classifiers corresponding to the first plurality of labeled samples. The system selects, from the pool of unlabeled samples, a second plurality of unlabeled samples comprising informative samples and non-informative samples. A respective informative sample corresponds to a first hyperplane which intersects the version space, and a respective non-informative sample corresponds to a second hyperplane which does not intersect the version space. The system acquires labels corresponding to the second plurality of unlabeled samples to obtain a third plurality of labeled samples. The system updates the first set of classifiers based on the third plurality of labeled samples, thereby improving accuracy of the first set of classifiers.

System and method for differentially private pool-based active learning

A multifunction printer connects to a controlled device via a proximity network link. The multifunction printer is connected as a master of the controlled device. The multifunction printer connects with a mobile device via a Bluetooth link, such that the mobile device is connected as a master of the multifunction printer. The mobile device is authenticated to determine credentials and access permissions relative to the controlled device. The mobile device's access to the controlled device is controlled from the multifunction printer via the Bluetooth link based on the credentials and access permissions.

Bluetooth hub device mediating connections between mobile device and controlled device

The current invention provides a system and method for Data Owners to share with Data Seekers extracted insights from the Big Data, instead of raw data or anonymized raw data, thus reducing or eliminating privacy concerns on the data owned by the Data Owners. An Oblivious Pseudo Random Function (OPRF) is used, with operations using OPRFs occur over encrypted data, thus Data Owners learn only the primary object from Data Seeker and nothing else about the remainder of Data Owners' data. Similarly, Data Seeker learns a list of associated secondary objects and nothing else about Data Owners' data. The extent of sharing can be limited using a predefined threshold depending how much private information Data Owner is willing to share or Data Seeker is willing to pay.

System for privacy-preserving monetization of big data and method for using the same

A method of reducing the storage requirements of blockchain metadata via dictionary-style compression includes receiving a request to add a transaction block to a blockchain. The method further includes determining an identifier (ID) of a dictionary block most recently stored on the blockchain. The method further includes compressing, by a processing device, one or more transactions of the transaction block based on the dictionary block to generate a compressed transaction block. The method further includes adding the ID of the dictionary block to the compressed transaction block. The method further includes providing the compressed transaction block, including the ID of the dictionary block, for storage on the blockchain.

Reducing storage of blockchain metadata via dictionary-style compression

One embodiment facilities user access to a standalone computing device. During operation, the system receives, by the standalone computing device from a mobile computing device associated with a user, a first command to access capabilities of the standalone computing device, wherein the first command includes an ephemeral user identifier which includes an ephemeral key and indicates user-specific metadata, wherein the ephemeral key is generated by a network service, wherein the ephemeral user identifier is digitally signed with a private key of the network service, and wherein the standalone computing device is not directly accessible by the network service. The system verifies, by the standalone computing device using a public key of the network service, that the ephemeral user identifier was generated by the network service. The system executes, by the standalone computing device, the first command based on the user-specific metadata.

System and method for securely enabling a user with a mobile device to access the capabilities of a standalone computing device

A network is organized into a plurality of broadcast domains. Each broadcast domain includes a plurality of nodes each configured to cause messages to be sent to two or more other of the nodes within the broadcast domain. The broadcast domains are coupled via bridging connections. Each bridging connection couples at least one of the nodes from a first of the broadcast domains to at least one of the nodes of a second of the broadcast domains. The messages are caused to be sent through the plurality of broadcast domains via a subset of the bridging connections. The subset of the bridging connections is selected non-deterministically via the plurality of broadcast domains.

Anonymous communications network utilizing bridging connections between broadcast domains

A method is provided for generating an encrypted database. The method includes: receiving a plaintext database having plaintext data entries therein; and generating an encrypted database using the plaintext database, the encrypted database including encrypted data entries therein. The encrypted database is configured to support at least one form of conditional query such that the at least one form of conditional query returns a correct encrypted result when the query is computed on the encrypted data entries without the decryption thereof.

System and architecture for analytics on encrypted databases

A multi-function printer is coupled to a mobile device via a proximity network interface. The multi-function printer determines a workflow specified by a user of the mobile device. An ephemeral token associated with the workflow is sent to the mobile user device. The mobile device uses the ephemeral token to create a payment packet that is sent to a payment server which sends a receipt in response thereto. The multi-function printer receives the receipt from the mobile device and in response to receiving the receipt, obtains a list of payments from the payment server. The multi-function printer performs the workflow based on validating the receipt against the list of payments.

System that facilitates making mobile payments to multi-function printer using proximity network and payment server

A method is provided for generating an encrypted database. The method includes: receiving a plaintext database having plaintext data entries in one or more columns; augmenting the received plaintext database to generate an augmented plaintext database, the augmenting including the addition of one or more columns to the received plaintext database, each added column corresponding to an attribute which is to be made available for conditional queries; and encrypting the augmented plaintext database to generate the encrypted database including encrypted data entries. The encrypted database supports at least one form of conditional query for those attributes corresponding to the added columns, the at least one form of conditional query being computed on the encrypted data entries without the decryption thereof to produce an encrypted result.

Growing community of inventors

Mountain View, CA, United States of America

Alejandro Enrique Brito